CVE-2015-5633: Undefined Security Weakness

The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5636: Undefined Security Weakness

The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5634: Undefined Security Weakness

The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

PT-2015-6997

Name of the Vulnerable Software and Affected Versions Newphoria Auction Camera versions prior to 1.2 for Android Newphoria Auction Camera for iOS Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For Newphoria Auction Came...

PT-2015-6999

Name of the Vulnerable Software and Affected Versions Newphoria Koritore versions prior to 1.1 Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issu...

PT-2015-6998

Name of the Vulnerable Software and Affected Versions Newphoria MEGAPHONE MUSIC versions prior to 1.1 Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve t...

PT-2015-7000

Name of the Vulnerable Software and Affected Versions Newphoria Reversi versions prior to 1.0.3 for Android Newphoria Reversi versions prior to 1.2 for iOS Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For Android...

PT-2015-6996

Name of the Vulnerable Software and Affected Versions Newphoria application framework versions prior to 1.12.3 for Android Newphoria application framework versions prior to 1.12.2 for iOS Description The issue allows attackers to bypass the whitelist.xml URL whitelist protection mechanism,...

PT-2015-7001

Name of the Vulnerable Software and Affected Versions Newphoria Photon versions prior to 1.2 Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve the issue...

CVE-2015-5629

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

Code injection

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5629

The CVE pertains to the NTT Broadband Platform Japan Connected-free Wi‑Fi application (Android up to 1.6.0 and iOS up to 1.0.2). Multiple connected sources confirm a vulnerability that allows bypassing the URL whitelist protection and may enable arbitrary API execution or loading of arbitrary pag...

CVE-2015-5629

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

PT-2015-6993

Name of the Vulnerable Software and Affected Versions NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.6.0 and earlier for Android NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.0.2 and earlier for iOS Description The issue allows attackers to...

CVE-2015-5629: Undefined Security Weakness

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...

The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Acrobat PDF editing program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe Reader DC PDF viewer program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...

CVE-2015-0297

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the 1 ServerInvokerServlet or 2 SchedulerService or 3 cause a denial of service disk consumption via the ContentManager...

CVE-2015-0297

Red Hat JBoss Operations Network 3.3.1 is affected by CVE-2015-0297. The issue arises because the server did not correctly restrict access to certain remote APIs, enabling a remote, unauthenticated attacker to execute arbitrary Java methods via the ServerInvokerServlet or SchedulerService, and po...